Alert resolution based on identifying information technology components and recommended actions including user selected actions

A device, comprising:

• a memory;
• and
• a processor, the processor configured to execute instructions stored in the memory to:
• identify an information technology (IT) component deployed in a managed environment based on an alert;
• identify action-to-component associations having respective likelihoods exceeding an action-to-component likelihood threshold between actions and the IT component, wherein the identified action-to-component associations indicate that the actions have the respective likelihoods of resolving the alert when executed in the managed environment;
• select, as recommended actions, the actions of the identified action-to-component associations;
• receive a user-selected action for resolving the alert;
• accumulate, in data regarding actions selected for execution, an indication of whether the recommended actions include the user-selected action;
• transmit a request to execute the user-selected action in the managed environment;
• and
• accumulate, in data regarding action execution, an indication of whether the user-selected action resolved the alert, wherein whether the user-select action resolved the alert is determined based on whether additional requests to execute actions, other than the user-selected action, in the managed environment with respect to the alert were received between a first time of receiving the user-selected action and a second time of receiving input indicating that the alert is resolved.

A non-transitory computer-readable storage medium, comprising executable instructions that, when executed by a processor, facilitate performance of operations, comprising:

• identifying an information technology (IT) component deployed in a managed environment based on an alert;
• identifying action-to-component associations having respective likelihoods exceeding an action-to-component likelihood threshold between actions and the IT component, wherein the identified action-to-component associations indicate that the actions have the respective likelihoods of resolving the alert when executed in the managed environment;
• selecting, as recommended actions, the actions of the identified action-to-component associations;
• receiving a user-selected action for resolving the alert;
• accumulating, in data regarding actions selected for execution, an indication of whether the recommended actions include the user-selected action;
• transmitting a request to execute the user-selected action in the managed environment;
• and
• accumulating, in data regarding action execution, an indication of whether the user-selected action resolved the alert, wherein whether the user-select action resolved the alert is determined based on whether additional requests to execute actions, other than the user-selected action, in the managed environment with respect to the alert were received between a first time of receiving the user-selected action and a second time of receiving input indicating that the alert is resolved.